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RESOURCE RESERVATTOTJ 

TECHNICAL FTET.n OF TWP. TNVentTON 

This invention relates to the field of resource 
reservation, and in particular to a method of 
controlling access to a communications network, and to 
components of a network using such a method. 
DESCRIPTION OP RELATED APT 

The Internet is a communications network which is 
becoming widely available. The Internet provides a 
"best effort" bearer service. That is, the user 
receives the best service available at the time he 
requests it, but no commitments are given to the user 
in terms of available bandwidth, transit delay, or 
packet loss. The Internet is particularly useful in 
data communications applications, but is of limited use 
for telecommunications applications which require 
guaranteed bandwidth availability, and specify maximum 
values for the transit delay and loss of data. The 
Internet cannot usually guarantee the required quality 
of service. 

One conventional way of achieving resource 
reservation, to be able to provide a required quality 
of service commitment, is to use connection states to 
store information in the network nodes about bandwidth, 
buffer parameters, connection identity and status. 
However, an advantage of the Internet is that it is a 
connectionless network, which therefore cannot use this 
technique without sacrificing the simplicity of the 
Internet. 

One conventional way of achieving bearer service 
differentiation, in a connectionless network, is to use 
a set of priority bits in the packet header. However, 
in a public connectionless network, it is still 
necessary to control how many connections use the 
highest available priority. if every connection uses 
the highest available priority, the network can still 
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in effect only offer a best effort service to the 

USSrS A problem remains, therefore, as to how to control 
admission to the network. 
rpppuwTf&L pTPT.n np THE TNVENTIQy 

The present invention seeks to solve the problem 

of achieving admission control and resource reservation 
in a connectionless network. 

According to the invention, each transmission by a 
user across the network includes a message sent to the 
user from the network. The message includes 
information about the priority level of the ^ 
transmission, based on the user's contract with the _ 
network provide, and can subsequently be extracted by 
the network to determine how to handle the 

transmission. , . „ _ HTe 

Thus, rather than rely on the network being able 
to detect the status of the connection, the -levant 
information is transmitted by the user wxth the data 
transmission, and can be extracted by the network as 

reqUi In d pref erred embodiments, this information can be 
used for admission control and for routing purposes. 

For a better understanding of the present 
invention, and tc show how it may be brought ■ 
effect, reference will now be made, by way of example, 
to the accompanying drawings. 
P t»tt?.p nESf PTPTTnW OF DRAWINGS. 

Figure 1 is a schematic representation of a 
network in accordance with the invention. 

Figure 2 illustrates the flow of signalling 
m essages in accordance with the i- ention ; 

■ Figure 3 is a flow chart indicating the steps 
taken in a method in accordance with the invention. 

Figure 4 is a graphical representation of an 
admission control procedure in accordance with one 
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aspect of the invention. 

Figure 5 illustrates a ticket protocol in 
accordance with an aspect of the invention. 

Figure 6 illustrates a network operating in 
accordance with an aspect of the invention. 

Figure 7 illustrates a network operating in 
accordance with another aspect of the invention. 
ro ^TT,m DE^TPTTQN PPgFKRRED KMBODIMENTS 

Figure 1 represents a network in accordance with 
the invention. In Figure 1, a user at terminal A 
intends to send a message, in the form of data packets, 
to terminal B across the Internet. The Internet 
includes a large number of nodes, of which only a small 
number are shown in Figure 1. These are designated 
real-time routers RS, while the node to which the 
terminal A is connected is designated the access router 

In accordance with preferred aspects of the 
invention, each node in the network, including users 
who may wish to send or receive data packets, has an 
internal clock. The clock at each node is used to 
measure time slots of size TO seconds, where TO is an 
arbitrary period of perhaps several seconds, chosen to 
be reliably greater than the maximum network transport 
delay. The nodes and terminals are synchronized to the 
network clock reference. 

As described herein, it is assumed that the 
network is able to support resource reservation from 
end to end. However, it will be appreciated that the 
invention is equally applicable when resource 
reservation is only available over a specific network 
domain, covering only a part of the end to end path, 
in such a case, the reservation protocol is termxnated 
by the routers at the edges of that network domain. 

Resource reservation for a user data flow may be 
supported by different types of reservation protocols 



along the end-to-end path of the flow. For example, 
the protocol according to an aspect of the invention 
may be used over a specific network domain, covering 
only a part of the end- to -end path. An interworking 
function is then needed between the network domain 
supporting the protocol according to the invention and 
adjacent network domains using other types of 
reservation protocols. As a special case, an arbitrary 
type of reservation protocol can be used for the 
signalling between the user and the access node, while 
the network internal signalling is performed with the 
protocol according to the invention. The interworking 
function between the two types of reservation protocol 
is then located in the access node. 

Although the invention is described herein with 
reference to the Internet, it is applicable to any 
connectionless packet network, whether public or 
private. 

In accordance with preferred embodiments of the 
invention, the sender has a traffic contract with its 
network provider, under which a particular quality of 
service is guaranteed. This allows the network 
provider to offer service differentiation to users. 
Thus, users who are prepared to pay higher charges are 
able to guarantee access to higher bandwidths, or 
higher priority traffic handling. 

The flow of signalling messages during a data 
transmission will now be described with reference to 
Figure 2, while the steps taken in the access router AR 
will be described with reference to the flow chart of 
Figure 3 • 

When the sender wishes to initiate a data 
transmission, a user resource reservation request REQ^U 
is sent from the terminal A at point PI in Figure 2, 
and received at the access router AR in step 1 of the 
method of Figure 3. The resource reservation request 
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specxfies the required bandwidth for the transmission 
the required traffic class, the source address and the 
destination address. These parameters are thus set for 
the duration of the transmission at this stage. 

In step 2 of the method, it is determined at the 
access router AR whether the resource reservation 
request passes the admission control. This admission 
control is performed in a way which is described in 
more detail below, if the resource reservation request 
does not pass the admission control, the request is 
denied. 

As described in more detail below, the information 
needed for admission control is not stored in the 
network on a per connection basis, but can be extracted 
by the network as required from messages associated 
with every transmission which gains access to the 
network. Thus, these messages must contain all 
information which is necessary to allow the network 
nodes to perform admission control and policing of the 
transmission as required. 

If the resource reservation request passes the 
admission control, the method passes to step 3 at point 
P2. Here, the access router AR sends a network 
resource reservation request REQ-N across the Internet 
to the terminal B. Each node in the transmission path 
can perform resource reservation and admission control 
For example, at point P3, admission control is carried 
out by the node RR. if the required bandwidth is 
available across the network, an acknowledgement ACK is 
sent from the terminal B to the access router AR at 
point P4, and received in step 4 of the method. 

Following receipt by the access router AR of the 
acknowledgement message ACK, required information about 
the state of the connection is passed from the network 
to the user A at point P5 and in step 5 of the method. 
Specifically, information about the resources allocated 



■' *-W and other connection parameters (for 
to the connection, ^ traffic contract) is 
example those specxf xed in the traffic ^ 
sent from the access router AR to the send 
ticket message Ml. The information xn the txcket 

mi is preferably protected by a digital 
message Ml is prater y * the user A. 

signature, to prevent its alteration Y . g 
The calculation of the digital signature is 

described in more detail ^ W fun<5tion wni ch is similar 

in JT^t ^ZX;^ -ch can be added to 

violet header before "^^^ ^ : 

-tlnl^r^ ration is determined by 
used xn * c l 0 ™** hat ±t bec omes possible to 

In one embodxment, tne u & ■ " „ t-ieket 
• \L bits in a conventional way, but the ticket 
prxority bits in ^ network and transmitted by 

message , determined by c priority 

the user with the data flow, -^"^ * parti cular 
levels may validly be set by the user fo . P 

data flow. . . below, the ticket 

a« discussed in more detaxi Deiow, 

dxscuss method shown xn 

message Tl, sent in step 5 ^ time 

Pigure 3, is sent at ^ ^eover, as will 

slot of duration s f*£ « ^ ticket also 

be described in more f or the 

allows the node A to reserve 

S^S^T- * a^»— .o: which X. . 
performed at the node AR- sender A, 

On receipt of the ticXe, =■—••£ togetner 
at point M in Figure 2. «nds a data packet. 



with- the ticket message Ml. 

At point P7 in Figure 2, and in step 7 of the 
method, the node AR is now able to police the data 
packet, by confirming that it complies with the 
original request REQ-U, in respect of which the ticket 
message Ml was issued. 

Assuming that the data packet does comply with the 
requirements specified in the ticket message, it is 
transmitted in step 8 of the method to the subsequent 
node RR, and hence to the receiving terminal B. 

At point P8 in Figure 8, the receiving terminal B 
sends an acknowledgement message ACK, which is returned* 
to the access node AR, and received in step 9 of the 
method. 

At point P9 in Figure 2, and in step 10 of the 
method, a further ticket message M2 is then returned to 
the sending terminal A. This ticket message M2 is 
valid for the time slot from time Tl until T2, and 
effectively reserves band width for the subsequent time 
slot from time T2 until T3, as discussed above with 
reference to the message Ml. 

The process then cycles until such time as the 
sending terminal A has completed transmission. Thus, 
in step 11 of the method, a further data packet 
containing the ticket message M2 is received at the 
node AR. 

The method for performing admission control at a 
network node will now be described, in more detail. In 
accordance with the invention, admission control is 
performed in each node of the network. Admission 
control is carried out on the basis of policy rules 
(for example, does the sender have a service contract 
which allows him to send a specific message type to a 
particular destination at a particular time), and on 
the basis of availability of resources. Admission 
control on the basis of policy rules is carried out in 
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a conventional way. while admission control on^the 
basis of availability of resources is. described further 

herS1 M mentioned above, each node in the network has 
5 an internal clock, which works on the basis of time 

slots of length T 0 . , .. . 

In one embodiment, the phase of the periodical 
transmission of ticket messages from terminals is 
synchronised to a common reference, and- the beginnings 
of the time intervals within the network nodes are 
synchronised to the same reference. Moreover, the time 
s£t length T„ is chosen to be longer than the , worst^ 
case network transport delay. In this way, 
. can be transmitted at times which guarantee that they 
arrive at network nodes at a. safe distance from the 
. edges of any time slot, thus ensuring that the tickets 
will be received within the intended time slot. It is 
this situation which is illustrated in ^^^^ 
However, in an alternative embodiment, the clocks 
' in the different nodes need not be synchronised 

As described above, a ticket message issued from 
m . access router to a sending terminal . comprises in 
effect a permission to transmit a packet with a 
specific oand width at priority level until the ticket 
' expires. The ticket is typically valid for one time 
' stot! which may for example have a duration of a few 

seconds, in the event that the user wishes to transmit 
data for a longer period, it is undesirable to force 
that user to make a completely new reservation revest, 
30 with the associated risk that the request would be . 
denied if resources were, unavailable, 
accordance with the invention, a user having an^ 
Mt ablished reservation has a higher priority, when 
: renewing tit reservation, than a user revesting a new 

35 • • """was described above with reference to W 
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2, each ticket message Ml; M2, M3, transmitted from the 
access router AR to the sending terminal A is itself 
valid for a current time period in order to prove that 
resources have been reserved for that time period, but 
is also valid to make a resource reservation for the 
immediately subsequent time slot. 

When the sending or receiving terminal wishes to 
terminate the reservation, a received ticket message 
can simply be discarded, and not returned to the access 
router. The loop is thus broken, and no new tickets 
are issued. The links along the path from sending 
terminal to receiving terminal will then calculate a 
decrease in the reserved bandwidth, and will thus be 
able to allocate more bandwidth for new resource 
reservations . 

Alternatively, if a sending terminal wishes to 
release bandwidth which has been reserved, it can send 
a release ticket message to the access router at any 
time. 

In addition, if, for any reason, a sending 
terminal does not receive a new ticket at an expected 
time, it transmits with its next packet of data a non- 
acknowledged ( "NACK" } ticket message in its place. 
This ticket NACK contains exactly the same information 
as the previously transmitted ticket. For the purposes 
of bandwidth reservation, one such non- acknowledged 
ticket message NACK can be treated as a valid renewal 
request . 

We can define an admission decision rule for the 
nodes in the network. Assume that a node gets a 
request for bandwidth B r on a link during time slot t n , 
i.e., it is necessary to decide whether to admit the 
flow for time slot t n . The admission decision is made 
on the basis that: 
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where 

I*. is the maximum bandwidth that can be 

. taax 

supported on the link. 
B a (t a ) is the total new bandwidth admitted on the 

5 link for time slot t n . 

B req (t n ) is the requested and admitted bandwidth so 

far on the link for time slot t n . 
B re i(t n ) is the bandwidth on the link released so far 
for time slot t n . 
10 Thus, the decision rule only depends on the 

internal time intervals within the nodes and the 
decision rule is the same, independent of whether the 
network is synchronised or not. Furthermore, this rule 
gives a "yes" if and only if indeed the requested 
15 bandwidth can be supported by the link. 

Thus, the node stores link states, each containing 
the aggregate reserved bandwidth on a link, but does 
not store the reserved bandwidth allocated to a 
particular connection, although it can obtain this 
20 information from a ticket message sent on the 

connection. 

Then, let 

and let 

*„('o> = w - w =°- 

We update B a at the end of time slot t n as: 

= *M + B ^0 ~ B M - inaxCOAC-i) " B ^^ 



25 where: 
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B m (t n ) is the bandwidth on the link measured from 

the "renew" and "NACK" tickets during time 
slot t n . 

B nack(t n ) is the total bandwidth on the link from 
"NACK" tickets during time slot t n . 
The result is that, if a sender stops sending 
tickets and there are no lost tickets deeper in the 
network, the bandwidth is released after two internal 
time intervals in all the nodes . This works 
independent of the clocks of the different nodes. 

The reason for using max(0/B 4 (-t B . x ) - B^UJ) to 
update B.ft^) instead of just B^t^J - B mc1l (t a ) , is 
that if some bandwidth measured at the node is 
associated to a ticket which is lost deeper in the 
network, B^t^) - B Mck (t a ) might be greater than zero. 
If this is the case we should obviously not reserve 
more bandwidth than we already have reserved. 

This form of admission control is illustrated 
graphically in Figure 4. 

In the example of Figure 4 the vertical axis 
represents the current estimate of the admitted 
bandwidth, while the horizontal axis is the time axis. 
The time at the particular node is divided into slots, 
as previously discussed, with the end points of the 
slots being designated TO, Tl, T2, and so on. Thus, in 
Figure 4, each rectangle represents a reservation or 
reservation request, with the height thereof 
representing the bandwidth required. White rectangles 
represent reservation requests, while shaded boxes 
represent allocated tickets which reserve bandwidth 
during a particular time slot. 

Thus, in Figure 4, at point tA, a bandwidth 
reservation request is received, and this remains valid 
for the time until TO, and for the whole of the 
subsequent time slot until Tl. At time tB, a second 
reservation request is received, and this remains valid 
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until the next end point Tl, and for the whole of the 
subsequent time slot until time T2 . A third 
reservation request is received at time tC, and, at 
each of these points, the estimate of admitted 
bandwidth is updated to include bandwidths requested in 
the most recently received reservation request. 

At time tD, a fourth reservation request is 
admitted, but the required bandwidth therefor is such 
that, to admit that flow would result in the estimate 
of admitted bandwidths exceeding the maximum bandwidth 
for that particular traffic class- Thus, the fourth 
reservation request is not admitted. 

At end point Tl, the ticket issued in respect of 
reservation request A becomes valid, and so, for the 
time slot from Tl until T2, the bandwidth estimate is. 
based on the bandwidth allocated by that ticket , and by 
the reservation request B and C. 

During the time slot from T2 until T3, tickets for 
the three flows A, B and C are all valid. At time T3 
ticket loop A stops, and so the estimate of admitted 
bandwidths falls. Similarly, at time T4, ticket loop C 
stops, and the estimate of admitted bandwidth falls 
again. Finally, at time T5, ticket loop B stops, and 
the estimate of admitted bandwidth falls to zero. 

The discussion of admission control above has been 
on the basis that the network nodes are synchronised. 
However, as previously mentioned, the method and 
apparatus of the present invention may allow the use of 
a non-synchronised network, by an appropriate 
modification of the ticket messages. To achieve this, 
each node in the network works with internal time slots 
which are alternately designated »0« and "1". When a 
node receives a ticket request, it then includes in the 
ticket a synchronisation bit which corresponds to the 
designation of the time slot in which the ticket 
request has been received. This ensures that, although 
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the different nodes in the network are not synchronised 
with each other, it is always possible to deduce the 
time slot in which a request has been received. The 
lack of synchronisation may mean that it is otherwise 
not possible to tell in which of two adjacent time 
slots a request has been received, but the 
synchronisation bit will always allow that distinction 
to be made. 

If a resource reservation request is allowed, that 
is, it passes the admission control, a ticket is issued 
as mentioned above . 

The ticket protocol, defining the form of the 
ticket, will now be described in more detail with 
reference to Figure 5 . As will be apparent, the ticket 
needs to include source and destination addresses and 
an indication of priority in the IP-header, but must 
also contain other relevant information, which is 
preferably set out in a format as shown in Figure 5, 
and as described below. 

Counter: 8 bits wide. A counter filed initialized 
to zero and incremented at each node where a { 
synchronisation bit is used. This field is used for 
the nodes to find the correct synchronization bit . 

Length 8 bits wide. The length of the 
Authentication data field in 32 bit words. 

Signal 8 bits wide. Information of type of ticket 
message. 

Synchronization bits 40 bits wide. The 
synchronisation bits used by the nodes. This implies 
that a maximum of 40 admission nodes can be used for a 
non synchronised network. 

Bandwidth 32 bits wide. The reserved bandwidth 
over the link. 

Authentication data. The length of this field is 
variable, but is always an integral number of 32 -bit 
words. 



If only the access node uses the authentication 
data it would be convenient to only use a 32-bit 
authentication data field. If more nodes will use 
authentication data for the digital signature, we 
suggest that the authentication data field should be 
used as a stock where each node which uses an 
authentication data field either add or remove the 
authentication data from the stock. A default length 
; of an authentication tag should be 32 bits. 

A method for calculating the digital ticket 
signatures is now described. As mentioned above all 
the nodes in the network have internal time slots, and 
successive time slots of the access node are desxgnated 
as tl , t 2 , t„ t 4 , ... Each slot has a duration of time 

T °' Each node, which wants to be able to put a 
signature to a ticket, holds one general key and one 
series of time keys. The series of time keys is- 
generated and kept internally within the node, and 
never transmitted to any location outside the node 
^ general key is denoted by k and the time dependent 
keys by k,, k„ k 3 , k 4 , where each time interval V 

is associated with a specific key V . The parts of the 
ticket message to be protected are denoted by m, and 
the ticket signature associated with this ticket 
message by s„. Thus, an authenticated ticket message 
issued by a real time node at slot t n consists of m^ 
concatenated with s n , i.e., [m. sj n - To sign a ticket 
message which arrives at the node time interval t n we 
use the keys k and k^ to sign the ticket message m. 
Let f be the signing function, thus, 

[m, sj n - [m, fim, k, k H ^y\ 

The signing function £ can be chosen using the 
authentication method proposed in J.I,. Carter and M.N. 
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Wegman, "New hash functions and their use in 
authentication and set equality", Journal of Computer 
and System Sciences, vol. 22, pp. 265 _ 279 , „ 81 £ t#r 
B. den Boer, "A simple and key-economical 
unconditionally secure authentication scheme", Journal 
of computer security, vol. 2, pp.«-7l. 1993 , and 
T. Johansson, G. Kabatianskii and B. Smeets, " 0n the 
relation between A-codes and codes correcting 
independent errors", Proceedings of Eurocrypt .93. mcs 

Is b ri LTT' Ver K ag ' pp - 1 " 11 ' 1993 • The latt - 

is briefly described below. 

Assume that we can rewrite m in the following way 
m - (1%, m 2/ . nij, where each ^ £ CF(2r) ± e 

element in the finite field consisting of r'bits" If 
not xs a precise multiple of r bits we may assume that 
we pad 0 bits to m such that the length equals a 
multiple of r. Furthermore, assume that k x/ k„ 2 € 
GF(2') . Now, we use the following formula to calculate 
s» € GF{2 r ) : aCe 

s » °* m > *> = *„-i + «, k + m 2 -k 2 + • • . + m/ . */ 

This gives a probability for anyone, who only 
observes one signature signed with k„, to succeed in 
chancing m without detection by the access node, of- 



an 
If m 



2 r 



independent of the computing power of the adversary 

To verify a ticket signature at time period n, "the 
node uses the keys k and k* to verify the signature 
according to the formula above, i.e., it uses the 
present key to check a signature and the key for the 
next slot for calculating a new ticket signature. The 
key to be used is determined by the slot at which a 
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ticket arrives downstream at a node. Thus, in the case 
T Le network nodes are not synchronised when the 
when the netwox*. K ket before 

access node puts its signature to the ticket bef 
access n sender, it has to use the 

forwards it to the send ^ termine cne corre ct 

synchronisation bit to be ar>ie 

key for calculating the signature i.e. . i h e * ey c 

Responding to the s lot time^ *™ ^^cT ^ 

£ir st arrived at ^ ~«^ d ^tination addresses 
preferably protect ^he source ^ ^ 

" tl - —rk which want, 

rotate the ticket shou. = ^ ^ h. 
^ ^T^l^ generated using a key 

.icht T > t a -;-- t t:r;:» 

node to verify that • Qfc which it is 

issued in respect of the time 

received, =tnce the source might not have ; a 

/r^k and the transmission delay, the 

calculated both with key k. and k, around the 
transition from time interval t t° ^ ^ 

in accordance with aspects of the inv 
use of ticket messes can also allow — ^to* 
traffic flows in thee^t ^ network has 

receiver must^e ^U*^. the ouEput post to 
a routing table, wh ■ 'destination must be 

failure. ..^^v a router immediately 

In a a specific entry 

re-routes all the "attic upd ated. This 

hahle when that entry is upua 
in the routing tame wuc^ 
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works for best effort traffic but is not allowed for 
already established connections with reserved 
resources, which first must pass an admission control 
along the new path. Therefore a mechanism must be 
introduced to prevent this immediate rerouting of 
traffic with reserved resources. 

In accordance with this aspect of the invention, 
prior to the replacement of an output link in a routing 
table entry, the traffic on the link is stopped by 
discarding all tickets, thus breaking the ticket loop. 
Moreover, the reserved traffic that is routed according 
to the changed entry is given the low priority of 
unreserved traffic. The user must thereafter initiate 
a new reservation request in order to reserve resources 
along the new path. 

The mechanism works as follows: suppose that the 
routing table changes from the "old" to the "new" set 
of router output ports in Table l. As can be seen, the 
traffic that was previously routed to output port C is 
now routed to output port A or B. Since the traffic 
that has been rerouted has not passed any admission 
control on the new output ports, the ticket messages 
must be stopped, and the priority of the payload 
packets must be reset to the low priority of unreserved 
traffic . 
Table 1 



destination address 


old output port 


new output port. 


destination address 1 


port C 


port A 


destination address 2 


port A 


port A 


destination address 3 


port B 


port B 


destination address 4 


port C 


port B 



This is achieved by introducing a temporary 
"switch-over" state for the entries in the routing 
table with a changed output port. Packets which are 
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routed according to the "switch-over- state are given 
the low priority of unreserved traffic, and ticket 
messages are dropped. The principle is illustrated in 
Table 2, which shows the routing table with the 
"switch-over" state. 
Table 2 




The switch-over state is kept until all ticket 
loops are broken/ which takes two time intervals Ta, 
and is indicated by the absence of new ticket messages. 
The ticket protocol- is then ready to operate as normal 
according to the new routing table, and the switch-over 
state will be terminated. 

Since the ticket loop has been broken, the user 
who wishes to restore the reservation must do^this by • 
issuing a new resource reservation request, which will 
be routed according to the new routing table. 

in some cases the change of the routing table is 
the result of a well controlled network management 
activity, where the operator has ensured that 
sufficient resources for the rerouted traffic are 
available on the new path. Then there is no heed to 
force a new admission control and resource reservation 
procedure by breaking the ticket loop as described 
above. The switch-over mechanism should therefore be 
disabled in this type, of controlled rerouting. The 
user data flow and the ticket messages are then 
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rerouted as soon as the routing table is changed The 
resource reservation is controlled by the ticket 
message and will thus be installed on the new path 
Since it is assumed that resources are available on the 
5 new path, no admission control procedure is needed when 

installing the new reservation, and there is thus no 
need for the user to send a resource reservation 
request message. The user does not have to be notified 
about the route change and just continues to send 
10 ticket messages as usual. 

In a network operating in accordance with aspects 
of the invention, the sender of the user data flow 
makes a resource reservation and will in most cases be 
charged for this reservation. It is therefore natural 
15 that the sender will have an interest in the 

performance of the network service. i n order to 
deliver performance feedback to the sender, the 
receiving terminal measures the performance of the 
received packet flow in terms of delay and packet loss, 
!0 The result of the measurement can then be delivered to 

the sending terminal by inserting it in the ACK and 
ticket messages discussed previously and shown in 
Figure 2 . 

in accordance with aspects of the invention, 
admission control and resource reservation are done on 
a hop by hop basis, i.e., the decision to accept or 
re 3 ect a reservation is made locally by a resource 
management entity at each router. However, in some 
cases it may be advantageous to perform the resource 
management in a centralised manner. The introduction 
of resource management into a best effort network can 
then be achieved by adding a central resource 
management controller. The need for updating or 
replacing already installed routes can then be 
minimized, since they do not need to handle the 
admission control and resource reservation functions 



Tne ticket protocol discussed above might be used 
in tjr^e of network as described with reference to 
1D Figure 6 shows a network operating in 

Figure 6, Fxgure inve ntion. The 
accordance with an aspect o _ wnic h two 

network i. divided into ^ Each 

.subnet X and subnet n> Controller 

subnetwork ^^^/"""^iTE receiver ... the 

. T _ -Vie route from sender a 
(RMC) . . ■?» tne roui - e desionated as an 

_ , ..v,^ each subnetwork is design«*«-= 

R - A resource reservation request REQ ^ ^ 
A is forwarded to the "^.^^iS^X 

control^ keeps a record of all the re-- 

— :r h c :n^e i r;: rf or: amission 

information or Meeting a 

control, i.e. accept 3 accepted , the request is 

— - d £ Z nlT ubnetwork'alon* the path towards 
forwarded e is repeated. If 

the destination, where the p reserved all the 

th , resources have — ^£ j^Uent will be 
way to the destination, an -^J^^, ana , 
returned to th, a=ces ; > router ^ gender by the access 

ci cket «^ then periodically forward 

router AR. The sena 

the ticket message along with the dura tion 

,.„ olv t he ticket message may nave c* 
Alternatively, the t iscussed earlier, and may 

of only one time slot, as di s ag descr ibed 

need to be renewed with each data packet, 

with r --:\::;:^rnt 2 orview, . <- 

^\ protocol is thus independent of whether a 
the ticket protocol x olleris US ed, or whether 
resource management Qn a router hop by hop 

resource management is pertorm 
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basis. 



The user data is forwarded along the optimum path 
across the network, and does not need to pass the 
resource management controllers. The ticket message 
wxl-1 be routed via the resource management controllers 
so that they can keep track of the status of each 
connection. 

Alternatively, as shown in Figure 7, the ticket 
messages can be routed along the same path as the user 
data. The access routers AR to each subnetwork would 
then notify its resource management controller KMC only 
when the ticket message indicates a change in the 
status of the connection. The latter alternative is 
advantageous for a large subnetwork where the resource 
management controller would be over- loaded by all the 
txcket messages. By only sending a notification when 
the status of each connection is changed,, the number of 
messages to the controller can be reduced. 

If all the ticket messages are forwarded to the 
controller, then it can operate without storing states 
about each connection. if only change notifications 
about the status of each connection are sent from the 
access router to the controller, then both the access 
router AR and the controller RMC must keep states per 
connection. 

It must also be possible for the resource 
management controller to terminate the reservation by 
breaking the ticket loop. This is straightforward when 
the txcket messages are routed via the controller as in 
Figure 7, since it can discard the ticket message 
When the ticket messages are routed along with the 
data, the resource management controller RMC sends a 
notification to the access controller with an 
instruction to break the ticket loop -for a specific 
connection by discarding the corresponding ticket 
message . 
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: lt is important to note that the ticKet protocol 

int erf ace between the user ^^'^^ 
completely independent of whether ^ 

controller i. ^ ~^ erator whether the networ* 
matter f or the * raliged res our=e management 

should be based on • re£erenc e to Figures 6 and 

^"^resource C Ser^^ — ^ 
7, or xf resourc distributed manner by a 

-i* w> oerf ormed xn a aisttiu- 
should be perr ^ . ^ hop> 

resource management ^txty ^ - on is that an 

A further advantage of the xnven 

■ nhnose to run his network xn a 
operator can choose to _ ^.^ ^ . n a 

connectionless manner as descr 1<m in the 

connection oriented mode, connection 

„ ^ Mcket messages to set up 

request •»« J 1 "** A single message, passing 

state lor the data flow. ca n pass through 

through several operator domain - ^ 

nat wor*s ----- rol^n oriented mode in an 
advantageous to use a -while the rest of 

wM,t-er- to support chargxng, wnii 
access ~ u "*" ■ » ^ a connectionless manner, 
the network operates in which . allows 

. There is thus described a ^ 
bearer service dif ferentiation m a conne 



network - 
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CLAIMS 

1. A method of reserving network resources for a 
transmission, the method comprising: 

at an access node in the network, receiving 
resource reservation requests from sending network 
users connected thereto, each resource reservation 
request specifying an intended destination and a 
bandwidth requirement; 

in response to each received resource reservation 
request, performing an admission control procedure- 

in the event that the resource reservation request 
passes admission control, transmitting a request across 
the network to the intended destination associated 
therewith to allow other nodes to perform admission 
control procedures; 

in the event that the resource reservation request 
passes all admission control procedures to the intended 
destination, sending from the access node to the 
sending network user associated therewith a ticket 
message containing all necessary connection 
information; and 

allowing access to the network for a transmission 
from the sending network user when the transmission 
includes the ticket message, 

wherein the admission control procedure at the 
access node determines whether the required resource is 
available during a time slot by: 

determining what resources have already been 
allocated during said time slot, and what resources 
have already been reserved or requested, 

wherein sending a ticket from the access node to 
the sending network user during a time slot allocates 
the required resources for said time slot, and reserves 
the required resources for a second time slot 
immediately following said time slot. 

2. A method as claimed in claim 1, wherein, when 
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receives a transmission from the 

"^VTnetwork -W i-™ the ticket message, a 
sendxng networx us»« access node to 

the network network user during, the 

th %:n: e n tr ot ax^ates the reared resources for. 

resources for a third time slot immediately 

said second ^ 0 o V allocate bandwidth on a network 

Unk. ^ method ^^^^Z^ a 

Tcatlng^e handwidt^or said time slot and .or a 

allocating the following said time slot. 

eine slot -^ately ^ networic «« a 

.ranslissi^ from a first network user, the method 
' COmPr d; f f n lng a succession of time slots based on a 

^r^ving at a node in the network a resource 
Nation revest fro. the first network user to 

on a link from said node; _ ^ ne twork user 

sending from the network to the ffxrs 

a ^"nr^ces^o the network for a transmission 
from ^f i/st 

includes the ticket message, the ticket 

V" — =f said node are denoted by 
successive time slots at ^ message 

alternating binary values, and the " 

includes a synchronization ^^"^ 9 sald tioket 
binary value denoting a time slot, in whi 
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message was generated. 

6. A method as claimed in claim 4, wherein the 
ticket message includes a digital signature, calculated 
on the basis of a key which is used only during a time 
slot in which said ticket message was generated, 

7. A method of reserving network resources for a 
transmission from a first network user, the method 
comprising: 

receiving at a node in the network a resource 
reservation request from the first network user to 
initiate a reservation; 

confirming that the required resource is available 
on a first link from said node to a destination 
address; 

sending from the network to the first network user 
a ticket message containing connection information; and 

allowing access to the network for a transmission 
from the first network user when the transmission 
includes the ticket message, 

wherein, when it is determined that the link is no 
longer available and that an alternative link must be 
used, the ticket message is dropped. 

8. A method of reserving network resources for a 
transmission from a first network user, the method 
comprising: 

receiving at a node in the network a resource 
reservation request from the first network user to 
initiate a reservation; 

confirming that the required resource is available 
on a link from said node; 

sending from the network to the first network user 
a ticket message containing connection information; and 

allowing access to the network for a transmission 
from the first network user when the transmission 
includes the ticket message, 

wherein it is determined whether to allow access 
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to the network on the basis of resources allocated by 
previous ticket messages, and 

wherein the ticket message remains valid for a 
predetermined time period such that , in the event of a 
network error, the resources allocated thereby are 
released after expiry of the predetermined time period. 

9. A method of reserving network resources for a 
transmission from a first network user, the method 
comprising: 

receiving at a node in the network a resource 
reservation request from the first network user to 
initiate a reservation; . , . 

confirming that the required resource is available 

on a link from said node; 

sending from the network to the first network user 
a ticket message containing connection information; and 

allowing access to the network for a transmission 
from the first network user when the transmission 
includes the ticket message, 

the ticket message being valid for one time slot, 
as defined by the network, and including a digital, 
signature, calculated on the basis of a key which is 
used only during a time slot in which said ticket 
message was generated. . 
25 10. A method as claimed in claim 9, wherein when, 

a transmission including the ticket message has been 
completed, the network sends to the first network user 
a second ticket message containing connection 
information, the second ticket message being valid for 

a further one time slot 

11 A method of reserving network resources for a 
transmission from a first network user, the method 

comprising : 

receiving at a node in the network a resource 
reservation request from the first network user to 
initiate a reservation; 
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confirming that the required resource is available 
on a link from said node; 

sending from the network to the first network user 
a ticket message containing all necessary connection 
information; and 

allowing access to the network for a transmission 
from the first network user when the transmission 
includes the ticket message, 

wherein the determination as to whether the 
required resource is available on the link is made at a 
central resource controller. 

12. A method as claimed in claim 11, wherein the 
central resource controller controls the allocation of 
resources within a subnetwork made up of a plurality of 
nodes . 
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